Controlling enterprise data on mobile device via the use of a tag index

• US 9,665,577 B2
• Filed: 05/15/2012
• Issued: 05/30/2017
• Est. Priority Date: 05/14/2012
• Status: Active Grant

• Current Assignee: Taiwan Semiconductor Manufacturing Company Limited
• Original Assignee: International Business Machines Corporation
• Inventors: Kapoor, Shalini, Kodeswaran, Palanivel A., Nagaratnam, Nataraj, Nandakumar, Vikrant, Muppidi, Sridhar R.
• Primary Examiner(s): Spieler, William
• Application Number:
  US13/471,541
• Publication Number:
  US 20130305058A1
• Time in Patent Office: 1,841 Days
• Field of Search: 707741
• CPC Class Codes: G06F 16/11 File system administration, e.g. details of archiving or snapshots file system backup G06F11/14
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

A method, system and computer program product for controlling enterprise data on mobile devices. Data on a mobile device is tagged as being associated with either enterprise data or with personal data. Upon identifying the storage location of the tagged data and the identifier of the application that generated the tagged data, the tag, the storage location of the tagged data and the identifier of the application are stored in an index. A mobile agent residing on the mobile device may be directed by a mobile device management server of the enterprise to perform various actions (e.g., deleting, encrypting, backing-up) on the enterprise data using the index. In this manner, the enterprise has the ability to control their applications and data that resides on employees'"'"' mobile devices to ensure that such data is not lost or used in a manner that is contrary to the wishes of the employer.

Claims

1. A computer program product embodied in a computer readable storage medium for controlling enterprise data on mobile devices, the computer program product comprising the programming instructions for:

tagging data on a mobile device as being associated with one of enterprise data and personal data with a tag;

identifying a storage location of said tagged data;

obtaining an identifier of an application that generated said tagged data;

storing said tag indicating one of said enterprise data and said personal data, said storage location of said tagged data and said identifier of said application in a single index; and

implementing an arbitration policy to select an appropriate tag associated with said tagged data on said mobile device in response to different tags being associated with said tagged data on said mobile device.

2. The computer program product as recited in claim 1 further comprising the programming instructions for:

receiving a system call from said application;

obtaining a user identifier of said application; and

obtaining said tag corresponding to said user identifier of said application.

3. The computer program product as recited in claim 1 further comprising the programming instructions for:

receiving said identifier of said application, said tag and said storage location of said tagged data from said application.

4. The computer program product as recited in claim 1 further comprising the programming instructions for:

prompting a user to select a tag for application data; and

receiving said selected tag from said user.

5. The computer program product as recited in claim 1 further comprising the programming instructions for:

receiving a request to delete all or a selected portion of data tagged as said enterprise data;

identifying one or more storage locations of said tagged data to be deleted using said index; and

deleting said tagged data requested to be deleted.

6. The computer program product as recited in claim 1 further comprising the programming instructions for:

receiving a request to back-up all or a selected portion of data tagged as said enterprise data;

identifying one or more storage locations of said tagged data to be backed-up using said index; and

backing-up said tagged data requested to be backed-up.

7. The computer program product as recited in claim 1 further comprising the programming instructions for:

receiving a request to encrypt all or a selected portion of data tagged as said enterprise data;

identifying one or more storage locations of said tagged data to be encrypted using said index; and

encrypting said tagged data requested to be encrypted.

8. The computer program product as recited in claim 1 further comprising the programming instructions for:

receiving a request to apply access control on all or a selected portion of data tagged as said enterprise data;

identifying one or more storage locations of said tagged data to have applied access control using said index; and

applying access control on said tagged data requested to have applied access control.

9. A computer program product embodied in a computer readable storage medium for controlling enterprise data on mobile devices, the computer program product comprising the programming instructions for:

tagging data on a mobile device as being associated with one of enterprise data and personal data with a tap;

identifying a storage location of said tagged data;

obtaining an identifier of an application that generated said tagged data;

storing said tap indicating one of said enterprise data and said personal data, said storage location of said tapped data and said identifier of said application in a single index; and

implementing an arbitration policy to select an appropriate tagging mechanism in response to different tagging mechanisms tagging said data on said mobile device.

10. A system, comprising:

a memory unit for storing a computer program for controlling enterprise data on mobile devices; and

a processor coupled to said memory unit, wherein said processor, responsive to said computer program, comprises;

circuitry for tagging data on a mobile device as being associated with one of enterprise data and personal data with a tag;

circuitry for identifying a storage location of said tagged data;

circuitry for obtaining an identifier of an application that generated said tagged data;

circuitry for storing said tag indicating one of said enterprise data and said personal data, said storage location of said tagged data and said identifier of said application in a single index; and

circuitry for implementing an arbitration policy to select an appropriate tag associated with said tagged data on said mobile device in response to different tags being associated with said tagged data on said mobile device.

11. The system as recited in claim 10, wherein said processor further comprises:

circuitry for receiving a system call from said application;

circuitry for obtaining a user identifier of said application; and

circuitry for obtaining said tag corresponding to said user identifier of said application.

12. The system as recited in claim 10, wherein said processor further comprises:

circuitry for receiving said identifier of said application, said tag and said storage location of said tagged data from said application.

13. The system as recited in claim 10, wherein said processor further comprises:

circuitry for prompting a user to select a tag for application data; and

circuitry for receiving said selected tag from said user.

14. The system as recited in claim 10, wherein said processor further comprises:

circuitry for receiving a request to delete all or a selected portion of data tagged as said enterprise data;

circuitry for identifying one or more storage locations of said tagged data to be deleted using said index; and

circuitry for deleting said tagged data requested to be deleted.

15. The system as recited in claim 10, wherein said processor further comprises:

circuitry for receiving a request to back-up all or a selected portion of data tagged as said enterprise data;

circuitry for identifying one or more storage locations of said tagged data to be backed-up using said index; and

circuitry for backing-up said tagged data requested to be backed-up.

16. The system as recited in claim 10, wherein said processor further comprises:

circuitry for receiving a request to encrypt all or a selected portion of data tagged as said enterprise data;

circuitry for identifying one or more storage locations of said tagged data to be encrypted using said index; and

circuitry for encrypting said tagged data requested to be encrypted.

17. The system as recited in claim 10, wherein said processor further comprises:

circuitry for receiving a request to apply access control on all or a selected portion of data tagged as said enterprise data;

circuitry for identifying one or more storage locations of said tagged data to have applied access control using said index; and

circuitry for applying access control on said tagged data requested to have applied access control.

18. A system, comprising:

a memory unit for storing a computer program for controlling enterprise data on mobile devices; and

a processor coupled to said memory unit, wherein said processor, responsive to said computer program, comprises;

circuitry for tagging data on a mobile device as being associated with one of enterprise data and personal data with a tag;

circuitry for identifying a storage location of said tagged data;

circuitry for obtaining an identifier of an application that generated said tagged data;

circuitry for storing said tag indicating one of said enterprise data and said personal data, said storage location of said tagged data and said identifier of said application in a single index; and

circuitry for implementing an arbitration policy to select an appropriate tagging mechanism in response to different tagging mechanisms tagging said data on said mobile device.